Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format

1 comments

• nullcathedral 3 hours ago
  This was one of my most frustrating disclosures, feedback on the process is very welcome :)